Unrated severityNVD Advisory· Published Jan 24, 2025· Updated Jan 24, 2025
Coolify Vulnerable to Reflected XSS on Tag Search
CVE-2025-24025
Description
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.380, the tags page allows users to search for tags. If the search does not return any results, the query gets reflected on the error modal, which leads to cross-site scripting. Version 4.0.0-beta.380 fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<4.0.0-beta.380+ 1 more
- (no CPE)range: <4.0.0-beta.380
- (no CPE)range: < 4.0.0-beta.361
Patches
Vulnerability mechanics
References
1- github.com/coollabsio/coolify/security/advisories/GHSA-f2gf-jvmh-vq73mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.